[rql, integrity] let ValidationError and Unauthorized pass during composite deletion (closes #2070042)

<div id="ajaxroot">
  <h1>Hello</h1>
</div>